Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e37322e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          eH0pXHkF3OElPF727IBi8ty/gkHvvUfbr6vcscFiy6Y=
Subject key identifier:   C4:B0:0A:49:3F:7E:7D:5F:40:CC:24:0D:EE:65:81:E0:A6:EF:19:00
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       600FBF665411ADE6624D1A497C4487DF9D5A582E
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:43 +0000
ROA not before:           Thu 14 Sep 2023 18:42:43 +0000
ROA not after:            Thu 12 Sep 2024 18:47:43 +0000
asID:                     28309
IP address blocks:        187.44.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0f:bf:66:54:11:ad:e6:62:4d:1a:49:7c:44:87:df:9d:5a:58:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:43 2023 GMT
            Not After : Sep 12 18:47:43 2024 GMT
        Subject: CN=C4B00A493F7E7D5F40CC240DEE6581E0A6EF1900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:73:f8:e3:c8:e3:15:2f:0c:0a:11:1d:fe:
                    cb:d0:0d:cb:90:34:f8:1b:d6:ae:6b:74:f9:02:6b:
                    c1:66:d1:d8:9d:c1:b9:12:ff:0f:fb:2c:e5:bd:ab:
                    93:40:83:a4:c2:65:cc:30:b5:1a:9c:29:04:a6:83:
                    1b:2e:fa:44:be:b7:5c:c6:bf:e7:a1:85:b9:6a:9a:
                    06:19:dc:a0:54:f7:6d:83:5e:f4:d6:bd:f1:38:ff:
                    b3:0b:b1:e9:35:62:72:3b:f5:be:95:db:1e:37:f3:
                    01:05:10:b9:bf:cb:f8:77:b5:9c:d0:d5:82:58:6b:
                    78:d3:03:75:cc:14:ad:6f:55:61:17:16:0e:2e:b7:
                    37:07:2e:f2:d8:17:31:5f:4d:5e:c7:71:50:32:53:
                    e3:02:46:a4:b9:4a:c9:cf:50:bf:fd:1a:7f:b2:8a:
                    29:de:7b:52:40:c8:5c:27:52:9f:19:32:28:e9:d0:
                    f3:a3:59:47:de:70:77:e9:f5:a0:39:23:ec:a9:5d:
                    2c:7e:97:1f:10:10:7b:0a:f9:64:49:8d:96:a1:42:
                    ea:b3:ad:0b:85:aa:bd:67:d9:ef:bb:36:1c:33:54:
                    2f:04:d3:a5:f6:2a:77:95:46:61:7d:c8:89:2f:6a:
                    49:73:1f:34:cf:3a:c1:eb:f8:6e:4c:eb:c0:73:08:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B0:0A:49:3F:7E:7D:5F:40:CC:24:0D:EE:65:81:E0:A6:EF:19:00
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:ea:ad:90:3c:65:13:86:f4:bc:13:62:bb:34:04:99:67:
         40:f6:4f:7e:65:ae:f3:98:e8:ba:96:81:fa:2e:9e:b7:6e:08:
         ac:ad:a9:48:64:82:2a:13:63:e1:ff:a9:72:42:60:b4:a8:e0:
         d0:ac:14:e9:5a:26:25:6a:10:94:69:da:98:62:c4:6a:49:b3:
         38:c9:a1:bc:d2:f8:82:4a:dc:d2:fb:1e:05:1c:84:7f:ed:5e:
         59:94:ae:d0:c5:ab:b4:76:7a:e7:00:8e:81:b0:82:ba:0c:72:
         c0:0a:79:f9:d5:01:3c:12:2e:7a:2d:fb:37:14:36:95:72:c4:
         be:be:a3:07:ea:84:a5:7b:8a:c2:b0:0c:42:cb:dc:4d:0f:2f:
         da:68:59:de:75:41:03:f0:78:fd:f5:3b:4b:cb:46:c7:db:3d:
         af:b0:7a:53:38:57:d8:db:05:8b:20:45:2f:d4:19:71:b8:99:
         48:8d:75:8e:5e:f2:5b:e5:b5:a8:9c:59:76:69:d4:6c:cd:3c:
         ea:ed:01:27:0b:8c:55:3e:6e:52:58:ee:86:f1:e4:f5:ac:ea:
         10:97:d1:a8:4c:14:04:a9:a8:61:86:83:a4:29:2a:e7:b5:cb:
         b0:51:7f:86:f1:75:ad:25:ee:cc:e9:f0:93:21:2d:f1:98:e6:
         9e:3b:92:4c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYA+/ZlQRreZiTRpJfESH351aWC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDNaFw0yNDA5MTIxODQ3NDNaMDMxMTAvBgNV
BAMTKEM0QjAwQTQ5M0Y3RTdENUY0MENDMjQwREVFNjU4MUUwQTZFRjE5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrnP448jjFS8MChEd/svQDcuQ
NPgb1q5rdPkCa8Fm0didwbkS/w/7LOW9q5NAg6TCZcwwtRqcKQSmgxsu+kS+t1zG
v+ehhblqmgYZ3KBU922DXvTWvfE4/7MLsek1YnI79b6V2x438wEFELm/y/h3tZzQ
1YJYa3jTA3XMFK1vVWEXFg4utzcHLvLYFzFfTV7HcVAyU+MCRqS5SsnPUL/9Gn+y
iinee1JAyFwnUp8ZMijp0POjWUfecHfp9aA5I+ypXSx+lx8QEHsK+WRJjZahQuqz
rQuFqr1n2e+7NhwzVC8E06X2KneVRmF9yIkvaklzHzTPOsHr+G5M68BzCM3jAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUxLAKST9+fV9AzCQN7mWB4KbvGQAwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM3MmUzNDM0MmUzNzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbssSDANBgkqhkiG9w0BAQsFAAOCAQEAHmfqrZA8ZROG
9LwTYrs0BJlnQPZPfmWu85joupaB+i6et24IrK2pSGSCKhNj4f+pckJgtKjg0KwU
6VomJWoQlGnamGLEakmzOMmhvNL4gkrc0vseBRyEf+1eWZSu0MWrtHZ65wCOgbCC
ugxywAp5+dUBPBIuei37NxQ2lXLEvr6jB+qEpXuKwrAMQsvcTQ8v2mhZ3nVBA/B4
/fU7S8tGx9s9r7B6UzhX2NsFiyBFL9QZcbiZSI11jl7yW+W1qJxZdmnUbM086u0B
JwuMVT5uUljuhvHk9azqEJfRqEwUBKmoYYaDpCkq57XLsFF/hvF1rSXuzOnwkyEt
8ZjmnjuSTA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org